Hi, all;
I am delighted to announce that the VOTE proposed in the following
thread has PASSED.
https://lists.apache.org/thread.html/a41d69a42a6352aaeee583d9671a2f3854560d7e70a115fbbbd9469a@%3Cdev.httpd.apache.org%3E
I have recorded the following votes:
PMC
jorton, jim, druggeri, rjung, ylavic

+1
Build and tested by Apache Lounge Community Windows Win32/Win64 VC11,
VC14 VC15, no trouble reports received.
Build with by Microsoft supported convert with the in the tarball
included dsw/dsp/makefile files.
Build with dependencies:
- httpd.exe with OPENSSL_Applink and VC14/15

On 1/21/19 9:37 AM, Daniel Ruggeri wrote:
Hi, all;
I am delighted to announce that the VOTE proposed in the following
thread has PASSED.
https://lists.apache.org/thread.html/a41d69a42a6352aaeee583d9671a2f3854560d7e70a115fbbbd9469a@%3Cdev.httpd.apache.org%3E
I have recorded the following

Hi,
in twitter and other social media channels they're talking about a
current apache 0 day:
https://twitter.com/i/web/status/1087593706444730369
which wasn't handled / isn't currently fixed.
Some details are here:
https://github.com/hannob/apache-uaf
If this is true there will be exploits